ATLASSIAN ACP-520 - Atlassian Cloud Organization Admin Certification

Converting a managed account to an unmanaged account requires changing the email address of the account to a domain that is not verified by the organization. This action can only be done for all accounts from a verified domain, not for individual accounts.

https://support.atlassian.com/user-management/docs/make-changes-to-a-managed-user-account/

If a group that was used to share a filter or a dashboard was deleted, the users who belonged to that group would no longer receive the filter subscriptions or see the dashboard .

References:

[Manage shared filters and dashboards]

[Manage users, groups, permissions, and roles in Jira Cloud]

By removing the default group from the Jira Software User product role, you can prevent new users from automatically getting access to Jira Software when they join your site. This way, you can control who gets access to Jira Software and how many licenses are consumed.

ReferencesManage product access Product roles and permissions

Users who have access to at least one product are considered billable. In this case, Clyde, Derek, Earl, Francis, and Anne are billable users. Bob is not billable because he has not accepted the invitation to join the organization.

References = [Manage users and user tiers] and [Control how users get access to products]

When Bob logs into the site for the first time, he will be redirected to the landing product, which is Jira. However, since he does not have product access to Jira, he will see a message that says “You don’t have access to this product” and a button that says “Request access”. If he clicks on the button, an access request will be generated for Jira, which will need to be approved by a product admin.

ReferencesSet your site’s landing product Request access to a product

Organization insights is a feature that provides analytics and reports on your organization’s users, products, and security. You can access it from the Insights tab in your organization settings. Organization insights is available for all Atlassian cloud products and plans1.

References :

View organization insights

The groups jira-software-users-acme and jira-admins-acme are default groups that are automatically created when you invite users to Jira Software or assign them the Jira admin role in your organization. The suffix acme indicates that the groups belong to the organization with the domain name acme.com. The groups are used to manage product accessand permissions for Jira Software, but they do not imply anything about Confluence access or org admin privileges. Therefore, the only statement that is definitely true is that your organization has the Jira Software product.

References :

Default groups and permissions

Users & Permissions | Jira Software.

A direct cause for the “engineers” group having a lot more members than you have added manually is that it is a default group for Jira Software product access. This means that any new user who joins your site and has access to Jira Software will automatically be added to the “engineers” group. You can check and change the default group for Jira Software by going to Products > Jira Software > Manage product > Product roles.

References = [Default groups and permissions] and [Manage role and product permissions]

If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script. An API key is a token that allows you to manage your organization via the admin APIs1. You can create, view, and revoke API keys from the organization settings2. Revoking an API key will invalidate it and prevent any further requests using that key2.

The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script. It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script. It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script. It will only affect the IP addresses that are allowed to access your organization and products5.

References :

Manage an organization with the admin APIs

Create and revoke API keys

Verify a domain to manage accounts

Regenerate your security key

Set up an IP allowlist